Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/001EB4A284C911EFA902172CC4F9AE02.roa
File:                     001EB4A284C911EFA902172CC4F9AE02.roa (raw, json)
Hash identifier:          Bw2F5iL0z/9NqFJTIODMV36h/ZxBhs0s/d2p/TAWCs0=
Subject key identifier:   49:8B:F5:1C:46:7B:62:E3:1A:6C:55:30:D3:A8:0F:6F:CC:BB:94:C3
Certificate issuer:       /CN=A915B202/serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
Certificate serial:       0314
Authority key identifier: 8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/001EB4A284C911EFA902172CC4F9AE02.roa
Signing time:             Tue 13 Oct 2026 01:50:37 +0000
ROA not before:           Tue 13 Oct 2026 01:50:37 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     398465
IP address blocks:        103.15.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl
                          rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 00:50:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 788 (0x314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B202, serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
        Validity
            Not Before: Oct 13 01:50:37 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6acd8e6d-ac1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:b0:18:68:4f:0d:66:2a:03:ae:e3:c1:bc:
                    0a:d1:db:a1:c9:d8:38:0b:ab:19:35:eb:bf:36:32:
                    07:95:8e:33:ca:de:9b:f7:81:8a:56:3a:7d:b5:08:
                    fc:c0:f9:c5:cc:f1:3b:c1:cd:09:a2:56:69:84:00:
                    97:52:38:78:06:19:c6:1c:42:a3:05:4f:1e:c9:07:
                    54:30:02:50:62:1f:b9:47:ed:3f:ae:d6:7e:6c:91:
                    5c:6c:9d:70:23:6c:fc:c3:ed:48:62:11:0e:04:7c:
                    94:29:90:db:7c:e3:29:3b:c2:f1:3f:db:11:e9:5f:
                    fc:45:d5:7e:53:8a:d3:d9:e3:d4:00:52:03:99:3b:
                    4f:aa:f0:06:d2:8d:03:46:f5:9d:d7:92:ee:0a:2a:
                    8d:a9:cb:ee:fb:5e:88:c4:c9:fe:8a:f4:de:28:78:
                    2c:50:43:3d:8a:9c:8d:5d:3d:69:79:8f:f9:6e:d3:
                    23:b5:c4:22:ae:c4:1c:b1:0f:a0:09:01:e1:2a:37:
                    28:12:d8:31:d5:4b:07:0a:68:e8:6e:26:9f:d0:7c:
                    e0:fb:9c:a3:1c:af:ac:0a:e1:c2:d7:cf:7c:b4:f6:
                    cf:d0:58:79:84:ff:6a:8a:14:4b:53:74:4b:5f:e9:
                    c5:94:00:fc:00:0b:de:c6:1e:e4:44:8b:f2:ff:2f:
                    01:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8B:F5:1C:46:7B:62:E3:1A:6C:55:30:D3:A8:0F:6F:CC:BB:94:C3
            X509v3 Authority Key Identifier:
                keyid:8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/001EB4A284C911EFA902172CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:57:d8:30:bf:71:16:a4:c0:77:9a:f0:83:26:f5:eb:90:29:
         f6:d1:3c:2a:41:d7:a6:67:2a:e4:51:7d:d6:2c:b0:e3:a4:3d:
         8a:77:12:49:e8:7f:cd:c2:08:74:24:88:56:48:5e:37:d7:29:
         4c:c3:e2:56:db:45:e4:79:67:90:7d:24:a2:61:6d:17:86:2c:
         12:9a:31:6c:ec:3b:e0:79:b4:9d:a0:5f:09:1f:a4:95:17:dd:
         b0:ca:cb:6c:ad:a1:de:3a:32:88:c4:a4:ff:f7:f1:17:98:25:
         a7:9d:e0:ad:64:15:71:ae:ec:0a:94:93:e2:88:17:19:19:91:
         bc:6f:04:f0:6a:ef:02:be:53:ed:1a:06:2c:60:98:5f:15:e5:
         d1:6f:ca:d6:f9:f2:33:17:0b:91:fc:cf:c0:f2:3f:aa:0b:9f:
         3c:e8:c5:0e:26:3c:b5:64:03:24:24:3f:ce:50:70:78:1e:c3:
         22:48:c8:c8:2e:02:01:dd:94:12:44:56:1c:37:ed:59:d3:50:
         f0:f0:74:cb:84:70:bb:49:75:04:b4:c2:a1:59:8e:29:1d:2c:
         26:e0:93:d0:eb:18:78:a4:57:6c:5a:1f:ca:6f:a8:c0:60:09:
         98:66:36:61:40:3d:78:30:17:c9:e3:85:d8:42:b6:cb:54:62:
         ed:df:a2:4d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUIyMDIxMTAvBgNVBAUTKDhDQkU5REQ1OTkzNEM5QUQyMDVGQ0U2QUY4RUY0REI4
MDFGMUQzRUIwHhcNMjYxMDEzMDE1MDM3WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWNkOGU2ZC1hYzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtEmwGGhPDWYqA67jwbwK0duhydg4C6sZNeu/NjIHlY4zyt6b94GKVjp9tQj8
wPnFzPE7wc0JolZphACXUjh4BhnGHEKjBU8eyQdUMAJQYh+5R+0/rtZ+bJFcbJ1w
I2z8w+1IYhEOBHyUKZDbfOMpO8LxP9sR6V/8RdV+U4rT2ePUAFIDmTtPqvAG0o0D
RvWd15LuCiqNqcvu+16IxMn+ivTeKHgsUEM9ipyNXT1peY/5btMjtcQirsQcsQ+g
CQHhKjcoEtgx1UsHCmjobiaf0Hzg+5yjHK+sCuHC1898tPbP0Fh5hP9qihRLU3RL
X+nFlAD8AAvexh7kRIvy/y8B7wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEmL9RxG
e2LjGmxVMNOoD2/Mu5TDMB8GA1UdIwQYMBaAFIy+ndWZNMmtIF/OavjvTbgB8dPr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjIwMi80RDQxQ0Y5MjQw
OUUxMUVEQjM1MkVFNUVDNEY5QUUwMi9qTDZkMVprMHlhMGdYODVxLU85TnVBSHgw
LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pMNmQxWmsweWEwZ1g4NXEtTzlOdUFIeDAtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUIyMDIvNEQ0MUNGOTI0MDlFMTFFREIzNTJFRTVFQzRGOUFFMDIvMDAxRUI0QTI4
NEM5MTFFRkE5MDIxNzJDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZw/dMA0GCSqGSIb3DQEBCwUAA4IBAQCYV9gwv3EWpMB3mvCDJvXr
kCn20TwqQdemZyrkUX3WLLDjpD2KdxJJ6H/Nwgh0JIhWSF431ylMw+JW20XkeWeQ
fSSiYW0XhiwSmjFs7DvgebSdoF8JH6SVF92wystsraHeOjKIxKT/9/EXmCWnneCt
ZBVxruwKlJPiiBcZGZG8bwTwau8CvlPtGgYsYJhfFeXRb8rW+fIzFwuR/M/A8j+q
C5886MUOJjy1ZAMkJD/OUHB4HsMiSMjILgIB3ZQSRFYcN+1Z01Dw8HTLhHC7SXUE
tMKhWY4pHSwm4JPQ6xh4pFdsWh/Kb6jAYAmYZjZhQD14MBfJ44XYQrbLVGLt36JN
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:03:18 2026 by rpki-client